Jack Lloyd
5ed7fff8ce
Add a test of the OID->MD map functions
2019-05-06 12:16:18 -04:00
Jack Lloyd
5d9c9636fa
Add support for RSA PKCSv1.5 signatures using RIPEMD-160
2019-05-06 12:15:17 -04:00
Hanno Becker
73540c0777
Adapt ChangeLog
2019-05-04 08:18:09 +01:00
Hanno Becker
5f9aa2be7d
Adapt ChangeLog
2019-05-02 09:33:56 +01:00
Jaeden Amero
1439b09049
Merge remote-tracking branch 'origin/pr/2540' into development
...
* origin/pr/2540:
Add guards for MBEDTLS_X509_CRL_PARSE_C in sample
2019-04-24 11:20:31 +01:00
Jaeden Amero
3956a847e6
Merge remote-tracking branch 'origin/pr/2092' into development
...
* origin/pr/2092:
Add more missing parentheses around macro parameters
Add further missing brackets around macro parameters
Adapt ChangeLog
Improve macro hygiene
2019-04-24 11:17:21 +01:00
Simon Butcher
f35bb5a8e8
Clarify ChangeLog entry for fix to #1628
2019-04-18 15:57:30 +01:00
Jaeden Amero
f790a6cbee
Merge remote-tracking branch 'origin/pr/2536' into development
...
* origin/pr/2536:
Update crypto submodule
Minor fixes in get certificate policies oid test
Add certificate policy oid x509 extension
2019-04-17 10:52:54 +01:00
Jaeden Amero
ceb1370662
Merge remote-tracking branch 'origin/pr/2580' into development
...
* origin/pr/2580:
cpp_dummy_build: Add missing header psa_util.h
2019-04-16 15:11:32 +01:00
Ron Eldor
e82341646a
Add certificate policy oid x509 extension
...
Add the `MBEDTLS_OID_X509_EXT_CERTIFICATE_POLICIES` to the list
of supported x509 extensions, in `mbedtls_oid_get_x509_ext_type()`.
2019-04-16 13:26:54 +03:00
Peter Kolbus
2ae29ba444
cpp_dummy_build: Add missing header psa_util.h
...
Add missing header to fix #2579 .
Change-Id: I038166b826534bac853be34a0281384e26675187
2019-04-14 15:55:20 -05:00
Ron Eldor
8e6740f15d
Update ChangeLog
...
Co-Authored-By: confusedsushi <confused.sushi@googlemail.com>
2019-04-10 12:49:06 +01:00
Marcel
a6ead983b3
mention .gitignore changes in ChangeLog
2019-04-10 12:48:19 +01:00
Jaeden Amero
d037ad6471
Give credit to OSS-Fuzz for #2404
...
Add "Credit to OSS-Fuzz", in addition to Guido Vranken, for identifying
bug #2404 .
2019-04-08 11:23:50 +01:00
Jaeden Amero
aa3402018e
Merge remote-tracking branch 'origin/pr/2535' into development
...
* origin/pr/2535:
Add Wisun Fan device extended key usage
2019-04-05 14:36:08 +01:00
Jaeden Amero
bc5de0f12f
Merge remote-tracking branch 'origin/pr/2368' into development
...
Move ChangeLog entry to BugFix section.
* origin/pr/2368:
Fix default port number information
2019-04-05 14:23:48 +01:00
Jaeden Amero
d192ba4ef1
Merge remote-tracking branch 'origin/pr/2463' into development
...
* origin/pr/2463:
Fix a rebase error
Wrap lines at 80 columns
Add NIST keywrap as a cipher mode
Fix errors in AEAD test function
2019-04-05 14:15:40 +01:00
Jaeden Amero
62ab1f9961
Merge remote-tracking branch 'origin/pr/2405' into development
...
* origin/pr/2405:
Fix ChangeLog entry ordering
Fix typo
Add non-regression test for buffer overflow
Improve documentation of mbedtls_mpi_write_string()
Adapt ChangeLog
Fix 1-byte buffer overflow in mbedtls_mpi_write_string()
2019-04-05 14:08:49 +01:00
Jaeden Amero
3d8144731f
Merge remote-tracking branch 'origin/pr/2192' into development
...
* origin/pr/2192:
Increase okm_hex buffer to contain null character
Minor modifications to hkdf test
Add explanation for okm_string size
Update ChangeLog
Reduce buffer size of okm
Reduce Stack usage of hkdf test function
2019-04-05 13:53:14 +01:00
Jaeden Amero
1b86e4c881
Merge remote-tracking branch 'origin/pr/2106' into development
...
* origin/pr/2106:
x509.c: Fix potential memory leak in X.509 self test
2019-04-05 13:47:06 +01:00
Ron Eldor
80d0419189
Add guards for MBEDTLS_X509_CRL_PARSE_C in sample
...
Add checks in `ssl_server2` that `MBEDTLS_X509_CRL_PARSE_C` is defined
to fix compilation issue. Fixes #560 .
2019-04-04 15:05:18 +03:00
Ron Eldor
b6dc105456
Add Wisun Fan device extended key usage
...
Add the Wisun extended key usage oid and tests.
2019-04-03 13:48:50 +03:00
Jack Lloyd
ffdf28851d
Add NIST keywrap as a cipher mode
...
Closes #2003 see also #1658
2019-04-02 10:02:55 -07:00
Jack Lloyd
1dbc5a257f
Fix errors in AEAD test function
...
It was failing to set the key in the ENCRYPT direction before encrypting.
This just happened to work for GCM and CCM.
After re-encrypting, compare the length to the expected ciphertext
length not the plaintext length. Again this just happens to work for
GCM and CCM since they do not perform any kind of padding.
2019-04-02 10:02:55 -07:00
Jaeden Amero
0ea33776ce
Merge remote-tracking branch 'restricted/pr/552' into development
...
Ensure this merge passes tests by auto-generating query_config.c, adding
MBEDTLS_ECDH_LEGACY_CONTEXT to it.
* restricted/pr/552:
Fix mbedtls_ecdh_get_params with new ECDH context
Test undefining MBEDTLS_ECDH_LEGACY_CONTEXT in all.sh
Define MBEDTLS_ECDH_LEGACY_CONTEXT in config.h
Add changelog entry for mbedtls_ecdh_get_params robustness
Fix ecdh_get_params with mismatching group
Add test case for ecdh_get_params with mismatching group
Add test case for ecdh_calc_secret
Fix typo in documentation
2019-03-27 17:01:16 +00:00
Jaeden Amero
c73fde725b
Merge remote-tracking branch 'origin/pr/2531' into development
...
Ensure tests pass when the submodule is used by updating the list of
crypto tests to include test_suite_oid in both tests/CMakeLists.txt and
tests/Makefile.
* origin/pr/2531:
Add changeLog entry
Add certificate policy of type any policy id
2019-03-27 16:52:08 +00:00
Jaeden Amero
d5d01a0435
Merge remote-tracking branch 'origin/pr/2525' into development
...
* origin/pr/2525:
Update library version to 2.17.0
2019-03-26 14:50:06 +00:00
Ron Eldor
3b11c8590e
Add changeLog entry
...
Add changeLog entry with the additional oid for "Any Policy".
2019-03-26 14:41:07 +02:00
Jaeden Amero
3f8d78411a
Update library version to 2.17.0
2019-03-19 16:12:55 +00:00
Janos Follath
b6a59f66cd
Fix ChangeLog entry ordering
2019-03-06 16:29:37 +00:00
Jaeden Amero
eb0195d55b
Merge remote-tracking branch 'origin/pr/2239' into development
...
* origin/pr/2239:
Add ChangeLog entry
Fix private DER output shifted by one byte.
2019-03-05 16:35:48 +00:00
Jaeden Amero
0a9f9b20b6
Merge remote-tracking branch 'origin/pr/2317' into development
...
* origin/pr/2317:
Update ChangeLog
all.sh: Test MBEDTLS_MPI_WINDOW_SIZE=1
Fix DEADCODE in mbedtls_mpi_exp_mod()
2019-03-05 16:33:42 +00:00
Jaeden Amero
c851b08a49
Merge remote-tracking branch 'origin/pr/1818' into development
...
* origin/pr/1818:
Move ChangeLog entry from Bugfix to Changes section
Adapt ChangeLog
Return from debugging functions if SSL context is unset
2019-03-05 16:27:38 +00:00
Jaeden Amero
7df1bec82b
Merge remote-tracking branch 'origin/pr/1520' into development
...
* origin/pr/1520:
Use certificates from data_files and refer them
Specify server certificate to use in SHA-1 test
refactor CA and SRV certificates into separate blocks
refactor SHA-1 certificate defintions and assignment
refactor server SHA-1 certificate definition into a new block
define TEST_SRV_CRT_RSA_SOME in similar logic to TEST_CA_CRT_RSA_SOME
server SHA-256 certificate now follows the same logic as CA SHA-256 certificate
add entry to ChangeLog
2019-03-05 16:24:11 +00:00
irwir
f5ce5d52ac
Fix default port number information
2019-03-03 12:45:34 +03:00
Simon Butcher
535ee4a35b
Merge remote-tracking branch 'public/pr/2421' into development
...
* public/pr/2421: (68 commits)
Fix unused variable warning in ssl_parse_certificate_coordinate()
Add missing compile time guard in ssl_client2
Update programs/ssl/query_config.c
ssl_client2: Reset peer CRT info string on reconnect
Add further debug statements on assertion failures
Fix typo in documentation of ssl_parse_certificate_chain()
Add debug output in case of assertion failure
Fix typo in SSL ticket documentation
Add config sanity check for !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
ssl_client2: Zeroize peer CRT info buffer when reconnecting
Reintroduce numerous ssl-opt.sh tests if !MBEDTLS_SSL_KEEP_PEER_CERT
ssl_client2: Extract peer CRT info from verification callback
Improve documentation of mbedtls_ssl_get_peer_cert()
Improve documentation of MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
Fix indentation of Doxygen comment in ssl_internal.h
Set peer CRT length only after successful allocation
Remove question in comment about verify flags on cli vs. server
Remove misleading and redundant guard around restartable ECC field
Add test for !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE to all.sh
Free peer CRT chain immediately after verifying it
...
2019-03-01 12:46:07 +00:00
Simon Butcher
195bddebcc
Merge remote-tracking branch 'restricted/pr/528' into development
...
* restricted/pr/528:
Update query_config.c
Fix failure in SSLv3 per-version suites test
Adjust DES exclude lists in test scripts
Clarify 3DES changes in ChangeLog
Fix documentation for 3DES removal
Exclude 3DES tests in test scripts
Fix wording of ChangeLog and 3DES_REMOVE docs
Reduce priority of 3DES ciphersuites
2019-03-01 12:45:45 +00:00
Simon Butcher
74ac6e3fec
Merge remote-tracking branch 'public/pr/2028' into development
...
* public/pr/2028:
Update the crypto submodule to a78c958
Fix ChangeLog entry to correct release version
Fix typo in x509write test data
Add ChangeLog entry for unused bits in bitstrings
Improve docs for named bitstrings and their usage
Add tests for (named) bitstring to suite_asn1write
Add new function mbedtls_asn1_write_named_bitstring()
2019-03-01 12:44:19 +00:00
Simon Butcher
700cbac98a
Merge remote-tracking branch 'public/pr/2448' into development
...
* public/pr/2448:
Reword changelog entry
Update change log
Reenable GnuTLS next based tests
2019-03-01 12:40:43 +00:00
Andres Amaya Garcia
f8dffb3f34
Clarify 3DES changes in ChangeLog
2019-03-01 10:22:04 +01:00
Andres Amaya Garcia
22a8905686
Fix wording of ChangeLog and 3DES_REMOVE docs
2019-03-01 10:21:11 +01:00
Andres Amaya Garcia
4a512281ec
Reduce priority of 3DES ciphersuites
2019-03-01 10:19:27 +01:00
Andres Amaya Garcia
ce04951a6c
Fix ChangeLog entry to correct release version
2019-02-28 09:40:12 +00:00
Andres Amaya Garcia
d588ff7156
Add ChangeLog entry for unused bits in bitstrings
2019-02-28 09:38:03 +00:00
Hanno Becker
e31505d64e
Adapt ChangeLog
2019-02-26 14:38:09 +00:00
Jaeden Amero
415620c1f2
Merge remote-tracking branch 'origin/pr/2105' into development
...
Additional work done as part of merge:
- Run ./tests/scripts/check-generated-files.sh and check in the
resulting changes to programs/ssl/query_config.c
2019-02-22 10:33:15 +00:00
Jaeden Amero
9f47f82218
Merge remote-tracking branch 'origin/pr/2391' into development
2019-02-22 10:32:44 +00:00
Jaeden Amero
8963b0311c
Merge remote-tracking branch 'origin/pr/2411' into development
2019-02-22 10:32:44 +00:00
Jaeden Amero
d9516b508a
Merge remote-tracking branch 'origin/pr/2407' into development
2019-02-22 10:32:44 +00:00
Jaeden Amero
0ae63f7bc3
Merge remote-tracking branch 'origin/pr/2383' into development
2019-02-22 10:32:43 +00:00
Gilles Peskine
ccf8ba0e6d
Add changelog entry for mbedtls_ecdh_get_params robustness
2019-02-22 10:21:46 +01:00
Hanno Becker
996033e3df
Adapt ChangeLog
2019-02-19 17:59:57 +00:00
k-stachowiak
cddbd01e4f
Reword changelog entry
2019-02-19 12:40:34 +01:00
k-stachowiak
6409724059
Update change log
2019-02-19 12:25:24 +01:00
Peter Kolbus
5da93f8903
Update ChangeLog
2019-02-09 10:21:57 -06:00
Hanno Becker
bd9d51d969
Adapt ChangeLog
2019-02-08 14:26:41 +00:00
Hanno Becker
ac4172c5bb
Adapt ChangeLog
2019-02-08 14:24:58 +00:00
Andres Amaya Garcia
aabe52f036
Add ChangeLog entries
2019-02-07 10:38:22 +00:00
Andrzej Kurek
8764ccc83d
ChangeLog: rearrange misplaced sections.
...
Add information about mbed TLS 2.15.0 and mbed TLS 2.15.1.
2019-02-05 04:57:13 -05:00
k-stachowiak
c5a4a13a5c
Apply imperative style in the changelog entry
2019-02-05 09:11:58 +01:00
Peter Kolbus
995d5c1f8a
Add ChangeLog entry
2019-02-03 09:01:55 -06:00
Hanno Becker
f5e2861958
Adapt ChangeLog
2019-02-01 16:42:48 +00:00
Andrzej Kurek
de5a007316
Merge development commit f352f7 into development-psa
2019-02-01 07:03:03 -05:00
Andrzej Kurek
c470b6b021
Merge development commit 8e76332
into development-psa
...
Additional changes to temporarily enable running tests:
ssl_srv.c and test_suite_ecdh use mbedtls_ecp_group_load instead of
mbedtls_ecdh_setup
test_suite_ctr_drbg uses mbedtls_ctr_drbg_update instead of
mbedtls_ctr_drbg_update_ret
2019-01-31 08:20:20 -05:00
Jaeden Amero
91af329a55
Merge remote-tracking branch 'origin/pr/2214' into development
2019-01-30 15:08:25 +00:00
Jaeden Amero
14eca249f1
Merge remote-tracking branch 'origin/pr/2213' into development
2019-01-30 15:01:20 +00:00
Jaeden Amero
c42dd60f1f
Merge remote-tracking branch 'origin/pr/1949' into development
2019-01-30 14:46:35 +00:00
Jaeden Amero
dac9f45e5a
Merge remote-tracking branch 'origin/pr/1551' into development
2019-01-30 13:24:55 +00:00
Jaeden Amero
ad88be05b6
Add ChangeLog entry for #2371
2019-01-30 13:19:01 +00:00
Jaeden Amero
730ecdf3b1
Merge remote-tracking branch 'origin/pr/2371' into development
2019-01-30 13:15:40 +00:00
k-stachowiak
f4ab6b21bd
Improve wording in the ChangeLog
2019-01-29 11:55:11 +01:00
k-stachowiak
21daa3c1ee
Reduce the timing tests complexity
2019-01-29 10:19:49 +01:00
Antonin Décimo
36e89b5b71
Fix #2370 , minor typos and spelling mistakes
2019-01-24 10:37:40 +01:00
Simon Butcher
8e763329ad
Merge remote-tracking branch 'public/pr/2040' into development
2019-01-23 10:28:25 +01:00
Simon Butcher
442ca5710b
Merge remote-tracking branch 'public/pr/1375' into development
2019-01-23 10:27:05 +01:00
Simon Butcher
a3c821d143
Merge remote-tracking branch 'public/pr/2319' into development
2019-01-23 10:21:05 +01:00
Simon Butcher
0999ca3063
Merge remote-tracking branch 'public/pr/2326' into development
2019-01-23 10:19:25 +01:00
Simon Butcher
d4e327c4ff
Merge remote-tracking branch 'public/pr/2345' into development
2019-01-23 10:14:52 +01:00
Jens Wiklander
035eaea783
Add ChangeLog entry
...
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
2019-01-18 07:43:29 +01:00
ILUXONCHIK
4d7082288f
add entry to ChangeLog
2019-01-17 00:17:55 +02:00
Jeffrey Martin
801217e057
update ChangLog credit
...
Signed-off-by: Jeffrey Martin <Jeffrey_Martin@rapid7.com>
2019-01-16 09:25:36 -06:00
Jeffrey Martin
d20a0e2d9f
update ChangLog per comments
...
Signed-off-by: Jeffrey Martin <Jeffrey_Martin@rapid7.com>
2019-01-15 09:01:31 -06:00
Jeffrey Martin
a661be3593
Add fix of #1722 to ChangLog
...
Signed-off-by: Jeffrey Martin <Jeffrey_Martin@rapid7.com>
2019-01-14 16:40:59 -06:00
Hanno Becker
1b6d2b228d
Adapt ChangeLog
2019-01-10 09:22:16 +00:00
Ron Eldor
a81f3bd297
Add entry describing the bug fix
...
Add entry describing the bug fix in `mbedtls_ecdsa_genkey()`.
2019-01-10 10:49:02 +02:00
Simon Butcher
62ec2dd68f
Merge remote-tracking branch 'public/pr/975' into development
2019-01-08 16:28:08 +00:00
Simon Butcher
8de0501871
Merge remote-tracking branch 'public/pr/2128' into development
2019-01-08 16:23:57 +00:00
Simon Butcher
012a06cbf6
Merge remote-tracking branch 'public/pr/2228' into development
2019-01-08 15:26:58 +00:00
Darryl Green
eb7f1b54c9
Add ChangeLog entry
2019-01-07 13:05:37 +00:00
amisare
5c0b5b53a3
Update ChangeLog
2019-01-04 08:15:46 +08:00
Ron Eldor
4896c6bee5
Update ChangeLog
...
Co-Authored-By: amisare <243297288@qq.com>
2019-01-04 07:47:05 +08:00
Masashi Honma
fbda6126d6
Remove duplicate #include
...
Signed-off-by: Masashi Honma <masashi.honma@gmail.com>
2019-01-03 16:13:11 +09:00
Hanno Becker
8116ef7c81
Adapt ChangeLog
2019-01-02 11:38:14 +00:00
Simon Butcher
104fe53938
Add Changelog entry for clang test-ref-configs.pl fix
2018-12-28 12:00:35 +00:00
GuHaijun
f81f41a3b5
Fix ChangeLog formate
2018-12-28 18:28:18 +08:00
GuHaijun
a306979ce1
Fix ChangeLog formate
2018-12-28 14:06:29 +08:00
GuHaijun
f7e742d3ce
Update ChangeLog
2018-12-28 13:22:33 +08:00
Simon Butcher
6c164e754b
Update the version of the library to 2.16.0
2018-12-21 10:51:51 +00:00
Simon Butcher
e046053ba1
Clarify ChangeLog old versions and param validations
...
Clarified and made more coherent the parameter validation feature, it's scope
and what has changed. Added version 2.14.1 to the history which was released on
a branch.
2018-12-20 16:17:02 +00:00
Simon Butcher
6df8c53cd4
Merge remote-tracking branch 'public/pr/2134' into development-restricted
2018-12-20 12:34:44 +00:00
Simon Butcher
1efda39f8a
Merge remote-tracking branch 'public/pr/2297' into development
2018-12-20 12:16:29 +00:00
Simon Butcher
780cf189b0
Merge remote-tracking branch 'public/pr/2271' into development
2018-12-20 12:15:08 +00:00
Simon Butcher
032c037052
Merge remote-tracking branch 'public/pr/2270' into development
2018-12-20 12:04:13 +00:00
Simon Butcher
a033633bb0
Merge remote-tracking branch 'public/pr/2269' into development
2018-12-20 12:02:56 +00:00
Simon Butcher
0bbf7f450d
Merge remote-tracking branch 'public/pr/2279' into development
2018-12-20 12:01:49 +00:00
k-stachowiak
270a125946
Add a change log entry
2018-12-19 19:02:39 +01:00
k-stachowiak
d409285cfa
Add a change log entry
2018-12-19 17:34:58 +01:00
k-stachowiak
9af22e4790
Update change log
2018-12-19 17:32:19 +01:00
Simon Butcher
54b789aa74
Merge remote-tracking branch 'public/pr/2298' into development
2018-12-19 08:08:14 +00:00
Andres Amaya Garcia
ba519b94a5
Add parameter validation to SHA-512 module
2018-12-18 15:06:39 +00:00
Andres Amaya Garcia
79e593f617
Add parameter validation to SHA-256 module
2018-12-18 11:41:20 +00:00
Andres Amaya Garcia
f7c43b3145
Add parameter validation to SHA-1
2018-12-18 11:37:28 +00:00
Hanno Becker
6640b0d9a3
Undo deprecation of MBEDTLS_ERR_BLOWFISH_INVALID_INPUT_LENGTH
2018-12-18 09:53:14 +00:00
Hanno Becker
a034369eca
Undo deprecation of MBEDTLS_ERR_ARIA_INVALID_INPUT_LENGTH
2018-12-18 09:53:11 +00:00
Hanno Becker
938f9e9bdb
Undo deprecation of MBEDTLS_ERR_CAMELLIA_INVALID_INPUT_LENGTH
...
Merging MBEDTLS_ERR_CAMELLIA_INVALID_INPUT_LENGTH and
MBEDTLS_ERR_CAMELLIA_INVALID_KEY_LENGTH is an API break.
2018-12-18 09:50:57 +00:00
Hanno Becker
d2f3a00062
Introduce single BLOWFISH error code for bad input data
...
Deprecate the old specific error codes
* MBEDTLS_ERR_BLOWFISH_INVALID_KEY_LENGTH
* MBEDTLS_ERR_BLOWFISH_INVALID_INPUT_LENGTH
2018-12-17 13:26:37 +00:00
Hanno Becker
4c029d09be
Introduce single CAMELLIA error code for bad input data
...
Deprecate the old specific error codes
* MBEDTLS_ERR_CAMELLIA_INVALID_KEY_LENGTH
* MBEDTLS_ERR_CAMELLIA_INVALID_INPUT_LENGTH
2018-12-17 13:26:33 +00:00
Hanno Becker
2f47550018
Introduce single ARIA error code for bad input data
...
Deprecate the old specific error codes
* MBEDTLS_ERR_ARIA_INVALID_KEY_LENGTH
* MBEDTLS_ERR_ARIA_INVALID_INPUT_LENGTH
2018-12-17 13:26:28 +00:00
Manuel Pégourié-Gonnard
9794098cfa
Clarify ChangeLog entry again.
2018-12-17 13:13:50 +01:00
Ron Eldor
8b0cf2e76f
Include configuration file to headers
...
Add inclusion to configration file in header files,
instead of relying on other header files to include
the configuration file. This issue resolves #1371
2018-12-16 12:02:50 +02:00
Manuel Pégourié-Gonnard
12dce61e09
Fix order of sections in ChangeLog
2018-12-13 09:48:40 +01:00
Manuel Pégourié-Gonnard
e7306d30a9
Improve some documentation and ChangeLog entry
2018-12-13 09:45:49 +01:00
Manuel Pégourié-Gonnard
cd2b29cd12
Improve wording in documentation and ChangeLog
2018-12-12 10:23:57 +01:00
Manuel Pégourié-Gonnard
8a46c22466
Add a ChangeLog entry for MBEDTLS_CHECK_PARAMS
2018-12-11 12:28:56 +01:00
Jaeden Amero
01b34fb316
Merge remote-tracking branch 'upstream-public/pr/2267' into development
2018-12-07 16:17:12 +00:00
Janos Follath
855def157f
Add changelog entry for ECC hardware bugfix
2018-12-07 11:05:03 +00:00
Jaeden Amero
9055a7d855
Merge remote-tracking branch 'upstream-public/pr/2175' into development
2018-12-06 16:09:58 +00:00
Jaeden Amero
bc1cf5cd36
Merge remote-tracking branch 'upstream-public/pr/2131' into development
2018-12-06 16:04:55 +00:00
Jaeden Amero
c27e3420b9
Merge remote-tracking branch 'upstream-public/pr/2117' into development
2018-12-06 15:59:32 +00:00
Jaeden Amero
083681c832
Merge remote-tracking branch 'upstream-public/pr/2039' into development
2018-12-06 15:55:34 +00:00
Jaeden Amero
41722ec29e
Merge remote-tracking branch 'upstream-public/pr/1958' into development
2018-12-06 15:53:56 +00:00
Janos Follath
b8f27060e0
Add Changelog entry for the new ECDH context
2018-12-06 12:22:46 +00:00
Simon Butcher
fabc6001ff
Clarify attribution for the Bleichenbacher's Cat fix
2018-12-01 22:43:08 +00:00
Simon Butcher
41f9519530
Update ChangeLog for Crypto submodule update
2018-12-01 18:44:29 +00:00
Simon Butcher
51b8a2fa87
Merge remote-tracking branch 'restricted/pr/512' into development
2018-11-29 16:56:02 +00:00
Simon Butcher
b9eb7866eb
Merge remote-tracking branch 'restricted/pr/535' into development
2018-11-29 16:54:51 +00:00
Simon Butcher
658618b6b2
Merge remote-tracking branch 'restricted/pr/516' into development
2018-11-29 16:53:51 +00:00
Gilles Peskine
50da016e5c
Add changelog entry for mbedtls_mpi_write_binary fix
2018-11-29 12:46:05 +01:00
Gilles Peskine
056f19c79f
Tweak RSA vulnerability changelog entry
...
* Correct the list of authors.
* Add the CVE number.
* Improve the impact description.
2018-11-29 12:45:01 +01:00
Christian Walther
e0f90f6557
Add ChangeLog entry
2018-11-28 15:13:22 +01:00
Ron Eldor
cdfe0bcad8
Update ChangeLog
...
Add ChangeLog entry describing the fix.
2018-11-27 11:14:06 +02:00
Ron Eldor
8a6917dc67
Update ChangeLog
...
Update the ChangeLog with the fix.
2018-11-27 10:37:02 +02:00
Gilles Peskine
5da0505842
Add ChangeLog entry for deprecation of mbedtls_xxx_drbg_update
...
Fixes ARMmbed/mbedtls#1798
2018-11-26 19:26:22 +01:00
Gilles Peskine
1b09f4027e
Add ChangeLog entry for wiping sensitive buffers
2018-11-26 16:19:22 +01:00
Ron Eldor
822b834bdf
Update ChangeLog
...
Add an entry in ChangeLog describing the fix.
2018-11-25 10:38:34 +02:00
Simon Butcher
60ee838a8a
Merge remote-tracking branch 'public/pr/2224' into development-psa-proposed
2018-11-23 21:18:32 +00:00
Simon Butcher
ebeb6cb446
Update library version to 2.15.0
2018-11-23 14:18:15 +00:00
Hanno Becker
6767cca100
Merge branch 'gcm_through_cipher_api_tests' into psa_cipher_
2018-11-22 14:03:14 +00:00
Hanno Becker
f79aa9e3ca
Adapt ChangeLog
2018-11-22 13:41:53 +00:00
Jaeden Amero
3f6470a517
psa: Add ChangeLog entry for adding Mbed Crypto
2018-11-21 12:54:57 +00:00
Simon Butcher
c1b9892177
Update library version number to 2.14.0
2018-11-19 18:31:40 +00:00
Simon Butcher
b35e59d36d
Refine the language in the ChangeLog
...
Fix the language and descriptions in the ChangeLog following review of the
Release Notes for the next release.
2018-11-19 15:49:26 +00:00
Simon Butcher
681edee803
Fix language and formatting in ChangeLog
...
Changed the formatting and language in the ChangeLog to the house-style.
2018-11-15 13:01:23 +00:00
Simon Butcher
06d80cf172
Fix merge of Changelog 128bit CTR_DRBG entry
...
The entry describing support for 128-bit keys in CTR_DRBG was merged into the
wrong version.
2018-11-12 14:30:19 +00:00
Simon Butcher
de13963d66
Merge remote-tracking branch 'restricted/pr/520' into development-restricted-proposed
2018-11-12 14:30:16 +00:00
Simon Butcher
cdd1a6c872
Merge remote-tracking branch 'restricted/pr/510' into development-restricted-proposed
2018-11-12 14:29:14 +00:00
Junhwan Park
39bdab791d
x509.c: Fix potential memory leak in X.509 self test
...
Found and fixed by Junhwan Park in #2106 .
Signed-off-by: Junhwan Park <semoking@naver.com>
2018-11-10 20:22:54 +09:00
Simon Butcher
2ab14bb2ca
Clarified new platform errors in the ChangeLog
...
Clarified new platform errors and error code deprecations in the ChangeLog.
2018-11-09 20:09:33 +00:00
Simon Butcher
e51d4b336b
Merge remote-tracking branch 'public/pr/2054' into development-proposed
2018-11-09 19:57:53 +00:00
Ron Eldor
6aa9fb4916
Add ChangeLog entry
...
Add the ChangeLog entry describing the change.
2018-11-09 15:01:09 +00:00
Simon Butcher
53b45ec881
Merge remote-tracking branch 'public/pr/2079' into development-restricted-proposed
2018-11-07 12:58:44 +00:00
Simon Butcher
361ce6c302
Merge remote-tracking branch 'public/pr/2127' into development-restricted-proposed
2018-11-07 12:57:01 +00:00
Simon Butcher
241823aab8
Merge remote-tracking branch 'public/pr/1641' into development-restricted-proposed
2018-11-07 12:55:47 +00:00
Simon Butcher
42ab4ae033
Merge remote-tracking branch 'public/pr/2167' into development-restricted-proposed
2018-11-07 12:54:45 +00:00
Hanno Becker
f143a78011
Adapt ChangeLog
2018-11-06 17:59:28 +00:00
Hanno Becker
fe936c35c1
Adapt ChangeLog
2018-11-06 13:35:47 +00:00
Hanno Becker
d3445da3ef
Adapt ChangeLog
2018-11-05 11:54:06 +00:00
Simon Butcher
06f88e9c42
Merge remote-tracking branch 'public/pr/2007' into development-proposed
2018-11-04 19:12:57 +00:00
Simon Butcher
76646a4bac
Merge remote-tracking branch 'public/pr/1777' into development-proposed
2018-11-04 18:51:36 +00:00
Simon Butcher
2705beaeef
Merge remote-tracking branch 'public/pr/2095' into development-proposed
2018-11-04 18:48:04 +00:00
Hanno Becker
b12fd31415
Adapt ChangeLog
2018-11-02 10:49:09 +00:00
Simon Butcher
2b5be1e630
Fix ChangeLog entry for #2069
...
The fix for #2069 had accidentally been added to features, not bugfixes.
2018-10-30 15:55:10 +00:00
Hanno Becker
0bb204cab1
Adapt ChangeLog
2018-10-30 10:08:33 +00:00
Manuel Pégourié-Gonnard
d8e3a1ef66
Clarify documentation of ssl_set_own_cert()
...
fixes #507
2018-10-29 09:52:10 +01:00
Simon Butcher
7904f94550
Merge remote-tracking branch 'public/pr/1099' into development-proposed
2018-10-28 18:10:37 +00:00
Simon Butcher
4a865ef233
Add ChangeLog entry for PR #1618 - ARM DSP instruction support
2018-10-28 18:00:51 +00:00
Simon Butcher
5706452787
Merge remote-tracking branch 'public/pr/2056' into development-proposed
2018-10-28 17:21:29 +00:00
Simon Butcher
b4e5451326
Merge remote-tracking branch 'public/pr/2070' into development-proposed
2018-10-28 16:53:48 +00:00
Simon Butcher
17a0fab345
Merge remote-tracking branch 'public/pr/2111' into development-proposed
2018-10-28 16:22:18 +00:00
Simon Butcher
a07d86e8af
Merge remote-tracking branch 'public/pr/1902' into development
2018-10-27 18:36:55 +01:00
Simon Butcher
ddc9e26b3b
Merge remote-tracking branch 'public/pr/1627' into development
2018-10-27 18:27:41 +01:00
Simon Butcher
e783f4a767
Merge remote-tracking branch 'public/pr/1609' into development
2018-10-27 17:35:25 +01:00
Hanno Becker
a7d2fa7891
Adapt ChangeLog
2018-10-25 16:11:15 +01:00
Hanno Becker
e4f965da14
Adapt ChangeLog
2018-10-25 15:21:28 +01:00
Hanno Becker
5e0924cb52
Adapt ChangeLog
2018-10-18 12:12:14 +01:00
Hanno Becker
f24c3360fc
Adapt ChangeLog
2018-10-17 14:53:05 +01:00
Hanno Becker
7e1f3bedd9
Adapt ChangeLog
2018-10-15 13:20:28 +01:00
Manuel Pégourié-Gonnard
f0bbd7e3fd
Misc documentation fixes/improvements.
2018-10-15 13:22:41 +02:00
Manuel Pégourié-Gonnard
6346a75dfb
Merge branch 'development' into iotssl-1260-non-blocking-ecc-restricted
...
* development:
ssl-opt.sh: change expected output for large srv packet test with SSLv3
Adapt ChangeLog
Fix bug in SSL ticket implementation removing keys of age < 1s
ssl-opt.sh: Add DTLS session resumption tests
Add ChangeLog entry
Fix typo
Fix hmac_drbg failure in benchmark, with threading
Remove trailing whitespace
Remove trailing whitespace
ssl_server2: add buffer overhead for a termination character
Add missing large and small packet tests for ssl_server2
Added buffer_size and response_size options for ssl-server2. Added appropriate tests.
Solving a conflict in tests/ssl-opt.sh: two set of tests were added at the
same place (just after large packets):
- restartable ECC tests (in this branch)
- server-side large packets (in development)
Resolution was to move the ECC tests after the newly added server large packet
ones.
2018-10-15 11:26:17 +02:00
Janos Follath
e0e7ddf99e
Changelog: Add entry for prime validation fix
2018-10-09 16:36:53 +01:00
Janos Follath
3332937538
Changelog: Add entry for prime test improvement
2018-10-09 16:33:27 +01:00
Hanno Becker
abe6003f5a
Adapt ChangeLog
2018-10-09 12:44:47 +01:00
Hanno Becker
dc71ef8fcc
Adapt ChangeLog
2018-10-08 13:51:38 +01:00
Simon Butcher
5199227d87
Add Changelog entry for #767
...
Add Changelog entry for fix for alternative header/footers in CSR's.
2018-10-06 17:19:31 +01:00
Gilles Peskine
c5ccd7a1e7
Indicate the memory access variations in the changelog entry
2018-10-05 15:42:52 +02:00
Hanno Becker
617a321ed9
Adapt ChangeLog
2018-10-05 09:52:59 +01:00
Gilles Peskine
ddffa06501
Add ChangeLog entry
2018-10-03 13:40:16 +02:00
Simon Butcher
404aa65813
Add ChangeLog entry for Windows threading fix
2018-10-01 14:44:22 +01:00
Simon Butcher
df0500d7bc
Add Changelog entry for #482
...
Add Changelog entry for inline assembly/literal strings too long issue with
Clang.
2018-09-30 12:37:27 +01:00
Jaeden Amero
3725bb2d6d
rsa: pss: Enable use of big hashes with small keys
...
It should be valid to RSASSA-PSS sign a SHA-512 hash with a 1024-bit or
1032-bit RSA key, but with the salt size being always equal to the hash
size, this isn't possible: the key is too small.
To enable use of hashes that are relatively large compared to the key
size, allow reducing the salt size to no less than the hash size minus 2
bytes. We don't allow salt sizes smaller than the hash size minus 2
bytes because that too significantly changes the security guarantees the
library provides compared to the previous implementation which always
used a salt size equal to the hash size. The new calculated salt size
remains compliant with FIPS 186-4.
We also need to update the "hash too large" test, since we now reduce
the salt size when certain key sizes are used. We used to not support
1024-bit keys with SHA-512, but now we support this by reducing the salt
size to 62. Update the "hash too large" test to use a 1016-bit RSA key
with SHA-512, which still has too large of a hash because we will not
reduce the salt size further than 2 bytes shorter than the hash size.
The RSA private key used for the test was generated using "openssl
genrsa 1016" using OpenSSL 1.1.1-pre8.
$ openssl genrsa 1016
Generating RSA private key, 1016 bit long modulus (2 primes)
..............++++++
....++++++
e is 65537 (0x010001)
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
2018-09-27 18:23:08 +01:00